Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2020

57 records · 8 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2019-5645
    60This week

    Rapid7 Metasploit HTTP Handler Denial of Service

    HighCVSS 7.5WeaponizedEPSS 41%

    rapid7 · metasploitSep 1, 2020

  • CVE-2020-23839
    27Monitor

    A Reflected Cross-Site Scripting (XSS) vulnerability in GetSimple CMS v3.3.16, in the admin/index.php login portal webpage, allows remote at

    MediumCVSS 6.1Proof of conceptEPSS 10%

    get-simple · getsimple cmsSep 1, 2020

  • CVE-2020-24557
    62This week

    A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a

    HighCVSS 7.8KEVWeaponizedEPSS 2%

    microsoft · windowsSep 1, 2020

  • CVE-2020-5776
    39Monitor

    Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens.

    HighCVSS 8.8Proof of conceptEPSS 14%

    magmi project · magmiSep 1, 2020

  • CVE-2020-5777
    46Plan

    MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a

    CriticalCVSS 9.8Proof of conceptEPSS 23%

    magmi project · magmiSep 1, 2020

  • CVE-2020-25078
    89Now

    An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices.

    HighCVSS 7.5KEVWeaponizedEPSS 97%

    dlink · dcs-4603 firmwareSep 2, 2020

  • CVE-2020-25079
    81Now

    An issue was discovered on D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices.

    HighCVSS 8.8KEVWeaponizedEPSS 54%

    dlink · dcs-4703e firmwareSep 2, 2020

  • CVE-2020-14209
    43Plan

    Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution.

    HighCVSS 8.8Proof of conceptEPSS 27%

    dolibarr · dolibarrSep 2, 2020

  • CVE-2020-24949
    55Plan

    Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an authenticated user (not admin) to send a crafted request to the

    HighCVSS 8.8Proof of conceptEPSS 67%

    php-fusion · php-fusionSep 3, 2020

  • CVE-2020-24948
    32Monitor

    The ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file provided is a legitimate Zip file, allowing

    HighCVSS 7.2No exploitEPSS 13%

    autoptimize · autoptimizeSep 3, 2020

  • CVE-2020-25042
    40Plan

    An arbitrary file upload issue exists in Mara CMS 7.5.

    HighCVSS 7.2WeaponizedEPSS 18%

    maracms · maracmsSep 3, 2020

  • CVE-2020-11579
    38Monitor

    An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition.

    HighCVSS 7.5Proof of conceptEPSS 26%

    php · phpSep 3, 2020

  • CVE-2020-3495
    53Plan

    Cisco Jabber for Windows Message Handling Arbitrary Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 60%

    cisco · jabberSep 3, 2020

  • CVE-2020-14008
    40Plan

    Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location

    HighCVSS 7.2Proof of conceptEPSS 39%

    zohocorp · manageengine applications managerSep 4, 2020

  • CVE-2020-11117
    45Plan

    u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resul

    CriticalCVSS 9.8No exploitEPSS 19%

    qualcomm · ipq4019 firmwareSep 8, 2020

  • CVE-2020-25213
    98Now

    The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because

    CriticalCVSS 9.8KEVWeaponizedEPSS 97%

    filemanagerpro · file managerSep 9, 2020

  • CVE-2020-2036
    42Plan

    PAN-OS: Reflected Cross-Site Scripting (XSS) vulnerability in management web interface

    HighCVSS 8.8Proof of conceptEPSS 23%

    paloaltonetworks · pan-osSep 9, 2020

  • CVE-2020-2038
    54Plan

    PAN-OS: OS command injection vulnerability in the management web interface

    HighCVSS 7.2WeaponizedEPSS 86%

    paloaltonetworks · pan-osSep 9, 2020

  • CVE-2020-2039
    35Monitor

    PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload

    MediumCVSS 5.3No exploitEPSS 46%

    paloaltonetworks · pan-osSep 9, 2020

  • CVE-2020-24916
    44Plan

    CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.

    CriticalCVSS 9.8No exploitEPSS 17%

    yaws · yawsSep 9, 2020

  • CVE-2020-17408
    51Plan

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster 4.1.

    HighCVSS 7.5No exploitEPSS 69%

    nec · expresscluster xSep 10, 2020

  • CVE-2020-11998
    54Plan

    A regression has been introduced in the commit preventing JMX re-bind.

    CriticalCVSS 9.8Proof of conceptEPSS 48%

    apache · activemqSep 10, 2020

  • CVE-2020-9731
    34Monitor

    Out-of-bounds memory access could lead to code execution

    HighCVSS 7.8No exploitEPSS 11%

    adobe · indesignSep 10, 2020

  • CVE-2020-11991
    52Plan

    When using the StreamGenerator, the code parse a user-provided XML.

    HighCVSS 7.5Proof of conceptEPSS 72%

    apache · cocoonSep 11, 2020

  • CVE-2020-0878
    60This week

    Microsoft Browser Memory Corruption Vulnerability

    MediumCVSS 4.2KEVWeaponizedEPSS 2%

    microsoft · internet explorerSep 11, 2020

  • CVE-2020-16875
    47Plan

    Microsoft Exchange Server Remote Code Execution Vulnerability

    HighCVSS 8.4WeaponizedEPSS 46%

    microsoft · exchange serverSep 11, 2020

  • CVE-2020-1074
    45Plan

    Jet Database Engine Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 46%

    microsoft · windows 10Sep 11, 2020

  • CVE-2020-25540
    53Plan

    ThinkAdmin v6 is affected by a directory traversal vulnerability.

    HighCVSS 7.5Proof of conceptEPSS 75%

    thinkadmin · thinkadminSep 14, 2020

  • CVE-2019-0230
    68This week

    Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code exe

    CriticalCVSS 9.8WeaponizedEPSS 96%

    apache · strutsSep 14, 2020

  • CVE-2019-0233
    50Plan

    An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing a file upload.

    HighCVSS 7.5No exploitEPSS 66%

    apache · strutsSep 14, 2020

  • CVE-2020-15148
    63This week

    Unsafe deserialization in Yii 2

    CriticalCVSS 10.0Proof of conceptEPSS 77%

    yiiframework · yiiSep 15, 2020

  • CVE-2020-6146
    58Plan

    An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300.

    HighCVSS 8.8No exploitEPSS 75%

    gonitro · nitro proSep 16, 2020

  • CVE-2020-14181
    60This week

    Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vu

    MediumCVSS 5.3WeaponizedEPSS 99%

    atlassian · data centerSep 16, 2020

  • CVE-2020-6112
    36Monitor

    An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2

    HighCVSS 7.8No exploitEPSS 17%

    gonitro · nitro proSep 17, 2020

  • CVE-2020-6113
    50Plan

    An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating

    HighCVSS 7.8No exploitEPSS 64%

    gonitro · nitro proSep 17, 2020

  • CVE-2020-6116
    40Plan

    An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242.

    HighCVSS 7.8No exploitEPSS 28%

    gonitro · nitro proSep 17, 2020

  • CVE-2020-13944
    32Monitor

    In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit.

    MediumCVSS 6.1No exploitEPSS 25%

    apache · airflowSep 17, 2020

  • CVE-2020-11698
    61This week

    An issue was discovered in Titan SpamTitan 7.07.

    CriticalCVSS 9.8WeaponizedEPSS 73%

    titanhq · spamtitanSep 17, 2020

  • CVE-2020-5421
    29Monitor

    RFD Protection Bypass via jsessionid

    MediumCVSS 6.5Proof of conceptEPSS 11%

    vmware · spring frameworkSep 19, 2020

  • CVE-2020-25787
    45Plan

    An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16.

    CriticalCVSS 9.8Proof of conceptEPSS 18%

    tt-rss · tiny tiny rssSep 19, 2020

  • CVE-2020-25790
    33Monitor

    Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive.

    HighCVSS 7.2Proof of conceptEPSS 15%

    typesettercms · typesetterSep 19, 2020

  • CVE-2020-14179
    44Plan

    Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA

    MediumCVSS 5.3Proof of conceptEPSS 76%

    atlassian · jira data centerSep 20, 2020

  • CVE-2020-6541
    41Plan

    Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a craf

    HighCVSS 8.8No exploitEPSS 21%

    google · chromeSep 21, 2020

  • CVE-2020-6549
    43Plan

    Use after free in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a craft

    HighCVSS 8.8No exploitEPSS 27%

    google · chromeSep 21, 2020

  • CVE-2020-6550
    43Plan

    Use after free in IndexedDB in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a c

    HighCVSS 8.8No exploitEPSS 27%

    google · chromeSep 21, 2020

  • CVE-2020-6551
    43Plan

    Use after free in WebXR in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially exploit heap corruption via a craft

    HighCVSS 8.8No exploitEPSS 27%

    google · chromeSep 21, 2020

  • CVE-2020-11855
    40Plan

    An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier.

    HighCVSS 7.8WeaponizedEPSS 1%

    microfocus · operation bridge reporterSep 22, 2020

  • CVE-2020-11857
    60This week

    An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier.

    CriticalCVSS 9.8WeaponizedEPSS 15%

    microfocus · operation bridge reporterSep 22, 2020

  • CVE-2019-15993
    24Monitor

    Cisco Small Business Switches Information Disclosure Vulnerability

    MediumCVSS 5.3Proof of conceptEPSS 10%

    cisco · sg250x-24 firmwareSep 22, 2020

  • CVE-2020-3569
    65This week

    Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities

    HighCVSS 8.6KEVWeaponizedEPSS 3%

    cisco · ios xrSep 22, 2020

  • CVE-2020-24365
    38Monitor

    An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices.

    HighCVSS 8.8Proof of conceptEPSS 11%

    gemteks · wrtm-127acn firmwareSep 24, 2020

  • CVE-2020-15160
    42Plan

    Blind SQL Injection in PrestaShop

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    prestashop · prestashopSep 24, 2020

  • CVE-2020-25223
    98Now

    A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11

    CriticalCVSS 9.8KEVWeaponizedEPSS 96%

    sophos · unified threat managementSep 25, 2020

  • CVE-2018-5353
    42Plan

    The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows remote attackers to execute code and escalate

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    zohocorp · manageengine adselfservice plusSep 30, 2020

  • CVE-2020-13951
    51Plan

    Attackers can use public NetTest web service of Apache OpenMeetings 4.0.0-5.0.0 to organize denial of service attack.

    HighCVSS 7.5Proof of conceptEPSS 68%

    apache · openmeetingsSep 30, 2020

  • CVE-2020-25762
    39Monitor

    An issue was discovered in SourceCodester Seat Reservation System 1.0.

    CriticalCVSS 9.1Proof of conceptEPSS 11%

    seat reservation system project · seat reservation systemSep 30, 2020

  • CVE-2020-8243
    85Now

    A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to

    HighCVSS 7.2KEVWeaponizedEPSS 90%

    ivanti · connect secureSep 30, 2020